Sr Manager Endpoint Security

$130,000 - $260,000/Yr

Geico - Fredericksburg, VA

Full-time - Senior

Fredericksburg, VA

5,001-10,000 employees

Insurance Carriers and Related Activities

About the position

The Endpoint Security Leader at GEICO is responsible for providing strategic and technical direction for endpoint security across various platforms, including user devices, development environments, and production systems. This role involves transitioning the organization from a traditional IT security model to a more innovative, engineering-focused approach, while fostering a culture of security that supports business objectives. The leader will collaborate with various stakeholders to enhance security measures, streamline processes, and ensure compliance with industry standards, all while minimizing friction for users and developers.

Responsibilities

• Define strategic roadmaps for securing endpoints with purposeful and functional security without impacting or unnecessary overhead.
• Grow an engineering-focused team to manage security tooling through automation and remove manual processes.
• Drive standardization and consistency of user experience across user platforms regardless of on-site or on-premises.
• Influence and educate leadership at all levels to bring a security-minded approach to difficult challenges balancing usability and security.
• Collaborate with product managers, engineering leaders, endpoint and compute leaders, and other security teams to solve complex problems with endpoints.
• Proactively identify opportunities to enhance security measures, streamline processes, and optimize tooling to fortify our environment against emerging threats.
• Develop and implement technology, policies, standards, and guidelines to ensure compliance with industry regulations and frameworks.
• Provide impactful demonstrations and communicate the value of our security measures to the business, highlighting the positive impact on efficiency, customer trust, and overall success.
• Work with our business partners to help prioritize and validate the urgency of mitigation of identified threats and/or non-compliance.

Requirements

• Broad experience in security domains including endpoint, identity, network, and collaboration/messaging security.
• Extensive experience in building, deploying, and managing security tooling in both an end-user and a service provider production environment.
• Experience communicating and presenting to senior leaders with the ability to influence stakeholders.
• Deep experience with common endpoint security tooling such as EDR, EPM, FIM, DLP, SWG, UAC, APPC from strong vendors or active open-source projects.
• Strong background in a multi-platform environment with Linux, Mac, Windows.
• Experience with IaaS platforms from top-tier providers.
• Experience with solving security control requirements with engineering approaches.
• Ability to excel in a fast-paced, startup-like environment.
• Deep knowledge in MDM and system configuration solutions.
• Strong knowledge of industry-standard security tools, frameworks, and best practices.
• Experience working with auditors and demonstrating security controls.
• 5+ years in a dedicated security role, preferably in the tech industry.
• 3+ years of experience with AWS, GCP, Azure, or other cloud providers.
• 3+ years in a leadership role influencing company direction on security.
• 3+ years of designing and managing modern secure endpoint solutions either building or leveraging top partners (Crowdstrike, Sentinel, MS, Palo,…).
• 3+ years of experience in device management related technology solutions (Intune, Ansible, osquery, JAMF,…).
• Hands-on experience in configuring and maturing a data loss prevention (DLP) system.
• Experience applying security controls to exceed third-party attestation requirements (PCI, SOC, …).

Benefits

• Premier Medical, Dental and Vision Insurance with no waiting period
• Paid Vacation, Sick and Parental Leave
• 401(k) Plan
• Tuition Reimbursement
• Paid Training and Licensures